Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer
File:                     558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer (raw, json)
Hash identifier:          +/400ez/GXD5NQoFtY8rgrCb5ohqPyVD09V/NgyWZU4=
Subject key identifier:   55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DCE046D22541AC860F8ADCB15BAF39BA20C3542
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:31:42 +0000
Certificate not after:    Wed 02 Apr 2025 20:36:42 +0000
Subordinate resources:    AS: 270406
                          IP: 190.111.100.0/22
                          IP: 2804:6b88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ce:04:6d:22:54:1a:c8:60:f8:ad:cb:15:ba:f3:9b:a2:0c:35:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 20:31:42 2024 GMT
            Not After : Apr  2 20:36:42 2025 GMT
        Subject: CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:c7:c0:c2:65:84:4e:5a:5d:a2:7b:18:d6:
                    58:55:38:96:60:b1:01:aa:04:d4:4c:85:96:a1:aa:
                    d6:96:86:b5:7e:77:11:d5:0d:0e:dc:d9:d8:de:c8:
                    d0:aa:0a:28:31:7c:cb:fc:52:35:3c:e5:11:bf:bc:
                    4d:fb:cc:09:ba:d8:51:ae:e6:38:92:97:9e:9f:f5:
                    a4:b8:f4:2c:b9:b4:05:b4:c4:4f:0c:bf:b3:f3:5f:
                    35:7e:1f:dc:79:d7:8a:aa:bd:80:58:31:ce:2f:d0:
                    16:de:6e:31:47:3d:7f:79:dd:d0:d0:91:59:a2:9e:
                    dc:75:ec:dc:be:0a:6b:dc:88:77:ca:cc:3e:4a:5f:
                    e8:c2:05:dc:87:65:28:66:38:f0:6b:e1:8b:c2:e2:
                    e7:b1:86:97:38:07:2b:b3:12:e1:b1:b8:a0:c6:d9:
                    6f:24:f2:2a:c7:b5:ff:f4:0a:e1:38:a8:53:7d:71:
                    fb:0d:91:0e:be:c4:4f:06:05:09:e7:b8:28:b9:28:
                    48:15:5c:1b:73:d8:80:49:6b:13:28:48:3e:1c:22:
                    76:1d:d8:2c:36:0e:3c:c2:dd:5d:58:0b:80:0d:6f:
                    6b:b8:01:8c:64:9d:d2:d8:bd:6e:4b:86:43:53:43:
                    dc:60:82:fa:84:fa:a8:5f:bd:1f:48:46:2e:15:f1:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.100.0/22
                IPv6:
                  2804:6b88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270406

    Signature Algorithm: sha256WithRSAEncryption
         37:ef:3e:c7:a7:2f:5c:0f:3c:7f:28:cd:96:76:90:0a:50:79:
         20:9a:44:bd:38:eb:c1:20:e4:d3:a3:e7:99:4e:64:a5:5c:12:
         af:0c:d8:7c:96:39:85:96:01:0d:34:fd:56:92:e6:a6:25:7e:
         1f:c5:bb:35:d3:16:34:60:44:b5:f2:49:a3:16:b1:55:89:a5:
         80:fc:50:b2:d5:3e:27:c6:27:37:da:32:7d:f4:ca:3b:b6:65:
         2b:c9:f8:71:09:1f:2f:1b:b5:2c:b5:0a:4a:18:57:ed:af:18:
         0c:67:47:12:74:fb:bc:cb:94:57:fd:ae:09:02:97:9f:e6:c2:
         31:9b:bd:db:aa:05:8c:a9:9d:ed:aa:5b:13:c5:a4:28:0f:b1:
         27:09:7b:3f:80:07:cd:1e:83:e3:60:90:47:cd:5a:f4:e4:a7:
         44:ac:28:fa:1a:20:84:f4:ea:d8:8b:42:c9:fc:a1:3c:84:a1:
         74:e9:2d:ea:4f:8e:0d:c0:15:ef:ed:24:a9:5a:53:cb:3f:25:
         1e:24:fd:54:18:57:3f:6a:6e:89:18:eb:dc:69:1a:76:c0:84:
         03:8b:51:32:c7:70:d6:0c:84:ed:c5:a3:31:cf:6d:05:13:1a:
         c1:49:f1:f5:7a:62:ad:27:5c:c3:a4:e9:98:ad:03:43:22:32:
         86:c0:8e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org